På svenska
Peach AB – Privacy Policy
Last updated: 2026-11-06
1. Who we are
Peach AB (company reg. no. 559262-6468), Gustavslundsvägen 143, 167
51 Bromma, Sweden (“Peach”, “we”,
“us”) is the controller for the personal data we process when
you use the Peach website (https://peach.nu) and mobile applications (the
“Service”). This policy explains what data we collect, why,
and what rights you have. Our
Terms of Use govern your use of the Service.
2. Data we collect
2.1 Data you give us
- Account details: name, email address, phone number, profile photo
-
Bookings and purchases: what you book or buy, from which creator, and
when
-
Messages you send to us or to creators through the Service, and support
requests
- Reviews and other content you publish
-
For creators: business details, organisation or personal identity
number, tax and VAT details, payout details, and information about your
activities and prices
2.2 Data we collect when you use the Service
-
Device and usage data: device type, operating system, app version, IP
address, pages and features you use, and crash reports
-
Approximate location, if you allow it, to show activities near you
- Push notification tokens, if you allow notifications
-
Contacts, only if you choose to share the app with friends. We do not
upload your contact list.
2.3 Payment data
Card and other payment details are handled by our payment provider Stripe.
We do not store full card numbers. We receive information such as the
amount, the payment status and the last digits of the card.
2.4 Health data
Peach does not collect or process health data.
3. Why we use your data and our legal basis
-
To provide the Service – create your account,
handle bookings, payments, refunds, receipts and notifications. Legal
basis: performance of a contract.
-
To share booking details with the creator – the
creator you book with receives your name, email address and, if
provided, phone number so that they can deliver the service and contact
you about it. Legal basis: performance of a contract.
-
Customer support – answer your questions and
handle complaints. Legal basis: performance of a contract and legitimate
interest.
-
Accounting, tax and payouts – keep bookkeeping
records, report income and pay out money to creators. Legal basis: legal
obligation.
-
Security and fraud prevention – protect the
Service and our users. Legal basis: legitimate interest.
-
Analytics and product improvement – understand
how the Service is used and fix errors. Legal basis: legitimate
interest, or consent where required for cookies and similar
technologies.
-
Marketing – send newsletters and offers, and show
relevant ads on platforms such as Facebook and Instagram. Legal basis:
consent. You can withdraw your consent at any time (see section 8).
4. Who we share data with
Creators. When you book or buy from a creator, they
receive the details they need for your booking. Creators must use the data
only for booking-related communication and handle it in accordance with
the GDPR.
Service providers. We use providers that process data on
our behalf, under data processing agreements:
-
Google Cloud and Firebase – hosting, database, login, file
storage, push notifications and crash reports
- Stripe – payments and payouts
- Cloudflare – hosting, security and AI services
- PostHog and Mixpanel – product analytics
- Help Scout – customer support
- Resend and Mailchimp – email
- Algolia – search
- Google Maps – maps and places
Advertising platforms. If you have given consent, we
share hashed email addresses and events, such as completed bookings, with
Meta and Google to measure and target ads.
Authorities. We share data with authorities when the law
requires it, for example with tax authorities.
We do not sell your personal data.
5. Transfers outside the EU/EEA
Some of our providers are located in, or process data in, the United
States or other countries outside the EU/EEA. When this happens, we make
sure the transfer is protected, for example by the EU–US Data
Privacy Framework or the European Commission’s standard contractual
clauses.
6. How long we keep data
-
Account data, including your booking and purchase history: as long as
you have an account. When you delete your account, we delete or
anonymise your data, except data we must keep for other reasons below.
-
Payment records and receipts: if you delete your account, we keep these
for as long as accounting law requires, usually 7 years. Then we delete
them.
-
Support conversations: as long as needed to handle your request and
follow-up questions about it.
-
Analytics data: as long as needed to understand how the Service is used
and to fix errors.
- Marketing data: until you unsubscribe or withdraw your consent.
7. Cookies and similar technologies
We use cookies and local storage to keep you logged in, remember your
settings, measure how the Service is used, and, if you consent, measure
and target ads (for example with the Meta Pixel and Google tags). You can
block or delete cookies in your browser settings. Some parts of the
Service may not work without necessary cookies.
8. Your rights
Under the GDPR you have the right to:
- Get access to the personal data we have about you
- Correct incorrect data
- Have your data deleted
- Restrict how we process your data
-
Object to processing based on legitimate interest, and to direct
marketing at any time
- Get your data in a machine-readable format (data portability)
-
Withdraw your consent at any time, without affecting processing done
before the withdrawal
You can delete your account in the app. To use your other rights,
contact us. You can unsubscribe
from marketing emails with the link in each email.
If you think we process your data incorrectly, you can complain to the
data protection authority in the EU/EEA country where you live or work.
Our lead authority is the Swedish Authority for Privacy Protection (IMY),
www.imy.se.
9. Children
The Service is not intended for children under 13. Users under 18 may only
use the Service with the consent of a parent or guardian.
10. Changes to this policy
We may update this policy. We will tell you about material changes by
email or in the Service. The date at the top shows when the policy was
last updated.